ClamAV FSG Compressed Executable Infinite Loop Denial Of Service Vulnerability

ClamAV FSG Compressed Executable Infinite Loop Denial Of Service Vulnerability

Solution:

Please see the referenced vendor advisories for more information.

Clam Anti-Virus ClamAV 0.51

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.52

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.53

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.54

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.60

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.65

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.67

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.68

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.68 -1

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.70

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.80 rc3

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.80 rc1

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.80 rc2

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.80 rc4

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.80

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Trustix clamav-0.80-3tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix clamav-devel-0.80-3tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix clamav-0.87-1tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix clamav-0.87-1tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix clamav-0.87-1tr.i586.rpm
Trustix Secure Linux 2.2
http://www.trustix.org/errata/trustix-2.2/

Trustix clamav-devel-0.87-1tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix clamav-devel-0.87-1tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates/

Clam Anti-Virus ClamAV 0.81

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.82

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.83

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Mandriva clamav-0.87-0.1.102mdk.i586.rpm
Mandrakelinux 10.2:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva clamav-0.87-0.1.102mdk.x86_64.rpm
Mandrakelinux 10.2/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva clamav-db-0.87-0.1.102mdk.i586.rpm
Mandrakelinux 10.2:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva clamav-db-0.87-0.1.102mdk.x86_64.rpm
Mandrakelinux 10.2/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva clamav-milter-0.87-0.1.102mdk.i586.rpm
Mandrakelinux 10.2:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva clamav-milter-0.87-0.1.102mdk.x86_64.rpm
Mandrakelinux 10.2/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva clamd-0.87-0.1.102mdk.i586.rpm
Mandrakelinux 10.2:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva clamd-0.87-0.1.102mdk.x86_64.rpm
Mandrakelinux 10.2/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva lib64clamav1-0.87-0.1.102mdk.x86_64.rpm
Mandrakelinux 10.2/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva libclamav1-0.87-0.1.102mdk.i586.rpm
Mandrakelinux 10.2:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva libclamav1-devel-0.87-0.1.102mdk.i586.rpm
Mandrakelinux 10.2:
http://www1.mandrivalinux.com/en/ftp.php3

Clam Anti-Virus ClamAV 0.84 rc2

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Debian clamav-base_0.84-2.sarge.4_all.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.84 -2.sarge.4_all.deb

Debian clamav-daemon_0.84-2.sarge.4_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.4_alpha.deb

Debian clamav-daemon_0.84-2.sarge.4_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.4_arm.deb

Debian clamav-daemon_0.84-2.sarge.4_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.4_hppa.deb

Debian clamav-daemon_0.84-2.sarge.4_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.4_i386.deb

Debian clamav-daemon_0.84-2.sarge.4_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.4_m68k.deb

Debian clamav-daemon_0.84-2.sarge.4_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.4_mips.deb

Debian clamav-daemon_0.84-2.sarge.4_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.4_mipsel.deb

Debian clamav-daemon_0.84-2.sarge.4_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.4_powerpc.deb

Debian clamav-daemon_0.84-2.sarge.4_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.4_s390.deb

Debian clamav-daemon_0.84-2.sarge.4_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.4_sparc.deb

Debian clamav-docs_0.84-2.sarge.4_all.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.84 -2.sarge.4_all.deb

Debian clamav-freshclam_0.84-2.sarge.4_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.4_amd64.deb

Debian clamav-freshclam_0.84-2.sarge.4_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.4_arm.deb

Debian clamav-freshclam_0.84-2.sarge.4_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.4_hppa.deb

Debian clamav-freshclam_0.84-2.sarge.4_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.4_i386.deb

Debian clamav-freshclam_0.84-2.sarge.4_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.4_ia64.deb

Debian clamav-freshclam_0.84-2.sarge.4_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.4_m68k.deb

Debian clamav-freshclam_0.84-2.sarge.4_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.4_mips.deb

Debian clamav-freshclam_0.84-2.sarge.4_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.4_mipsel.deb

Debian clamav-freshclam_0.84-2.sarge.4_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.4_powerpc.deb

Debian clamav-freshclam_0.84-2.sarge.4_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.4_s390.deb

Debian clamav-freshclam_0.84-2.sarge.4_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.4_sparc.deb

Debian clamav-milter_0.84-2.sarge.4_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.4_alpha.deb

Debian clamav-milter_0.84-2.sarge.4_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.4_arm.deb

Debian clamav-milter_0.84-2.sarge.4_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.4_hppa.deb

Debian clamav-milter_0.84-2.sarge.4_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.4_i386.deb

Debian clamav-milter_0.84-2.sarge.4_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.4_ia64.deb

Debian clamav-milter_0.84-2.sarge.4_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.4_m68k.deb

Debian clamav-milter_0.84-2.sarge.4_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.4_mips.deb

Debian clamav-milter_0.84-2.sarge.4_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.4_mipsel.deb

Debian clamav-milter_0.84-2.sarge.4_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.4_powerpc.deb

Debian clamav-milter_0.84-2.sarge.4_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.4_s390.deb

Debian clamav/libclamav1_0.84-2.sarge.4_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.4_i386.deb

Debian clamav/libclamav1_0.84-2.sarge.4_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.4_mipsel.deb

Debian clamav_0.84-2.sarge.4_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.4_alpha.deb

Debian clamav_0.84-2.sarge.4_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.4_amd64.deb

Debian clamav_0.84-2.sarge.4_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.4_arm.deb

Debian clamav_0.84-2.sarge.4_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.4_hppa.deb

Debian clamav_0.84-2.sarge.4_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.4_i386.deb

Debian clamav_0.84-2.sarge.4_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.4_ia64.deb

Debian clamav_0.84-2.sarge.4_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.4_m68k.deb

Debian clamav_0.84-2.sarge.4_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.4_mips.deb

Debian clamav_0.84-2.sarge.4_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.4_mipsel.deb

Debian clamav_0.84-2.sarge.4_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.4_powerpc.deb

Debian clamav_0.84-2.sarge.4_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.4_s390.deb

Debian clamav_0.84-2.sarge.4_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.4_sparc.deb

Clam Anti-Virus ClamAV 0.84

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.84 rc1

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.85

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.85.1

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.86 .1

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.86

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Clam Anti-Virus ClamAV 0.86.2

Clam Anti-Virus ClamAV 0.87
http://sourceforge.net/project/showfiles.php?group_id=86638

Trustix clamav-0.87-1tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates/

Trustix clamav-devel-0.87-1tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates/

Conectiva Linux 10.0

Conectiva clamav-0.87-70136U10_11cl.i386.rpm
Conectiva 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/clamav-0.87-70136U10_11cl. i386.rpm

Conectiva libclamav-devel-static-0.87-70136U10_11cl.i386.rpm
Conectiva 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav-devel-static-0.8 7-70136U10_11cl.i386.rpm

Conectiva libclamav1-0.87-70136U10_11cl.i386.rpm
Conectiva 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav1-0.87-70136U10_1 1cl.i386.rpm

Conexant clamav-database-0.87.20050625-70136U10_11cl.i386.rpm
Conectiva 10:
ftp://atualizacoes.conectiva.com.br/10/RPMS/clamav-database-0.87.20050 625-70136U10_11cl.i386.rpm